Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
File: ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer (raw, json)
Hash identifier: 4DxLrWqvqDKof1qZBLJzV6QvD1/2m96k5RlLwqyD0m0=
Subject key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC2D8D916AB58636137885A5ED14DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212658
IP: 45.130.240.0/22
IP: 91.209.114.0/24
IP: 91.226.79.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:2d:8d:91:6a:b5:86:36:13:78:85:a5:ed:14:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9aefe976787c2878e269d807cab98ad736d61e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:cb:9c:e7:e3:a4:45:4c:68:fb:75:47:9e:
ff:94:de:cc:63:16:9d:69:23:45:92:93:41:a9:c6:
07:f8:e5:93:e8:7d:c5:52:d5:60:6a:7f:fa:84:41:
8b:2c:3d:91:ac:e9:d5:b8:0c:ad:bf:1d:15:b8:9c:
a3:03:60:20:24:13:83:a0:fc:cd:64:3e:22:61:d9:
03:77:f5:94:d0:cb:40:15:cd:f5:a4:7a:20:48:14:
59:87:8e:5b:24:03:29:11:08:99:17:e4:1e:e2:12:
4f:d7:b4:b9:12:86:f0:f4:6f:c2:c2:b2:93:91:b7:
0f:9f:77:11:fe:fa:f5:5f:e1:e8:61:bb:c7:db:a1:
fa:d9:27:27:28:3b:00:67:19:4c:8b:10:40:5a:79:
e2:ed:96:2f:6d:0e:2f:92:f6:55:ad:b7:cd:83:71:
58:09:aa:0c:20:67:bd:b6:7c:c7:7f:15:d1:90:be:
22:0b:4c:6e:aa:2c:a8:77:1c:73:b1:58:00:8b:fd:
d7:0c:02:5d:85:fd:8e:00:aa:1a:84:64:8a:20:bf:
a7:3c:d0:8f:73:c9:6e:10:79:2f:97:80:88:38:3c:
07:04:b8:9e:6c:24:7e:56:8c:d5:21:bd:07:76:b8:
39:2b:4b:e8:cb:06:ae:d2:cf:75:56:2c:0c:1d:70:
ae:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.240.0/22
91.209.114.0/24
91.226.79.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212658
Signature Algorithm: sha256WithRSAEncryption
62:62:fe:22:56:89:46:f4:a0:61:80:ea:c5:58:80:bb:24:37:
e8:96:5e:75:03:ca:d7:8b:48:ea:0c:56:90:cd:c8:26:ca:25:
4c:6a:fd:7b:ac:ea:33:69:f4:da:df:5b:e7:12:85:06:c5:1c:
7a:64:00:c3:d9:a5:e8:d9:3d:8f:fc:bd:96:6f:e5:50:2a:3d:
8d:58:37:87:22:ec:22:dc:36:b9:23:7a:d7:8a:22:5a:14:43:
42:25:c7:00:8c:4b:32:0b:dc:57:71:25:70:63:a9:95:b2:19:
02:ed:99:06:36:c2:cb:71:ac:db:e7:20:db:26:20:2a:6a:6b:
dd:32:2a:70:fb:fb:14:ec:08:c9:99:71:6c:6d:b1:b8:e0:5c:
3f:36:4e:f2:b7:c3:ac:55:6e:82:bb:e1:4f:09:09:e2:68:e8:
1a:af:ee:c0:2b:f3:d3:d9:ed:e1:68:94:33:26:41:d0:c9:13:
49:64:f0:61:a5:d7:6f:89:2b:c3:95:0f:d5:64:ce:47:e3:c3:
0a:a3:24:81:e6:30:5a:f9:b4:99:cb:25:7d:ee:a5:04:d1:ea:
13:de:84:a8:16:91:26:9e:d1:ac:94:25:c9:6e:56:5b:b9:4a:
61:a4:ef:42:45:8c:ec:6d:9d:cf:a6:f9:33:0f:12:41:d5:65:
da:e4:46:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:24:46 2025 by rpki-client